Behavioral task
behavioral1
Sample
4f021038a716565fbeec991712ffb6a8.exe
Resource
win7-20231023-en
General
-
Target
4f021038a716565fbeec991712ffb6a8.exe
-
Size
3.9MB
-
MD5
4f021038a716565fbeec991712ffb6a8
-
SHA1
c6348062f00a9ec148dc6eca0d703db03bf43058
-
SHA256
9843113e67158d7cf466f309ea19711aed798cdfc70abbf5f10c8b6771380e16
-
SHA512
f78d0b0d0def58a14be7618c413d6e0d4f9b8f322dde371096f31de3b87a6158910089d6e413a3b277f1fb27a8e9c6417b78db0833aa37b7e0c01d15b672016c
-
SSDEEP
49152:+g6WLvct0ZavGBrvR02OqQ9Y8koFEMw1ZSatknTfUERbtbnSOoBIHVInkT6IjiBw:+gHPZ8TtIYbhyM
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
resource yara_rule sample family_zgrat_v1 -
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f021038a716565fbeec991712ffb6a8.exe
Files
-
4f021038a716565fbeec991712ffb6a8.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ